Google Professional Cloud Developer exam dumps

Google Professional Cloud Developer practice question 150 of 481

Professional Cloud Developer. Professional level, Google Cloud. Free question with the correct answer and a full explanation.

Google Professional Cloud Developer Question 150

Select 3Google Cloud Platform

Your company is developing a critical microservice that will be used in financial transactions. To ensure the integrity of the software supply chain, you want to adopt SLSA (Supply-chain Levels for Software Artifacts) standards. Which of the following actions align with achieving SLSA Level 3 compliance?

  1. A

    Use a build system that generates provenance and is resistant to tampering.

  2. B

    Sign all build artifacts and metadata with a trusted key to ensure authenticity.

  3. C

    Require a fully automated build process with no manual steps.

  4. D

    Store build provenance and metadata in a publicly accessible repository.

  5. E

    Ensure that source code is reviewed and version-controlled in a tamper-evident system.

Show answer and explanation

Correct answers: A, C, E

Explanation

SLSA (Supply-chain Levels for Software Artifacts) is a framework for improving the security and integrity of software supply chains. SLSA Level 3 focuses on ensuring a hardened build process, tamper-evident source control, and fully automated builds. Actions like generating tamper-resistant provenance, automating builds, and using tamper-evident version control align with these requirements. Signing artifacts and public storage of metadata are not required at this level.

  • A. Correct.

    Correct: SLSA Level 3 requires that the build system generates provenance and is hardened against tampering, ensuring the integrity of the build process.

  • B. Incorrect.

    Incorrect: Signing artifacts is important but is a requirement for SLSA Level 4, not Level 3.

  • C. Correct.

    Correct: SLSA Level 3 mandates a fully automated build process to minimize human intervention and potential for errors or tampering.

  • D. Incorrect.

    Incorrect: While storing provenance and metadata is important, making it publicly accessible is not a requirement for SLSA Level 3.

  • E. Correct.

    Correct: SLSA Level 3 requires source code to be version-controlled and reviewed in a tamper-evident system to ensure the integrity of the source code.

Timed practice exam

Take a Google Professional Cloud Developer practice test under exam conditions

60 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam

More Google Professional Cloud Developer practice questions

  1. 151.You are developing a cloud-native application that requires low-latency access to structured data,...
  2. 152.You are building a financial application that requires strong consistency for transaction data,...
  3. 153.You are building a real-time analytics application that processes large amounts of structured data...
  4. 154.You are developing an e-commerce application on Google Cloud that requires storing user data,...
  5. 155.You are building a real-time analytics application that processes high volumes of sensor data from...
Back to the Google Professional Cloud Developer exam dumps